New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

XSS on User field #18

Open

DinisCruz-QA opened this issue Oct 19, 2013 · 0 comments

DinisCruz-QA commented Oct 19, 2013

Cross-site-Scripting payloads can be placed on the username field:

payload inserted:

payload executed (after payload inserted):

payload executed (on victim's browser

for reference see:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment